In West Bend Mutual Insurance Company v. Krishna Schaumburg Tan, Inc., [2021 IL 125978] the Illinois Supreme Court held that West Bend owed a duty to defend its insured, a tanning salon, against a class-action lawsuit alleging the salon violated the Biometric Information Privacy Act (BIPA). The Court found that the duty to defend was owed due to the language of the insured's business owner's policy, which provided coverage for lawsuits alleging "personal injury" or "advertising injury." The ruling could have significant ramifications for carriers given the growing prevalence of BIPA class-action lawsuits and the resulting settlements.

The Illinois Biometric Privacy Act

BIPA was enacted in Illinois in 2008 and regulates how private entities may collect people's biometric information (such as fingerprints, voiceprints, facial scans, etc.) and bars selling or otherwise profiting from an individual's biometric identifiers. The statute provides for a private right of action by any person aggrieved by a BIPA violation and provides that a prevailing party may recover damages between $1,000 to $5,000 for each violation, as well as attorney's fees.